[dns-operations] if you're banning ANY queries, don't forget to ban SOA as well

[Paul Vixie]

% dig @ord.sns-pb.isc.org vixie.sf.ca.us soa +dnssec
...
;; Query time: 56 msec
;; SERVER: 2001:500:71::30#53(2001:500:71::30)
;; WHEN: Sat Sep 03 03:13:19 UTC 2016
;; MSG SIZE  rcvd: 2045

(hint: this is sarcasm. banning ANY is silly.)

-- 
P Vixie